MAL-2025-70234 Malicious code in reasonable-silver-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170032f91ef3c3b83052b0e1801a1ad0805ff916f290d72a602de95957b59532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70765 Malicious code in spicy-rose-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36b2f8879c9e35102e6927f0666f5cb449516fa714b607c068f964f0062a5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68169 Malicious code in expensive-coffee-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f01112b0d40fe8a0b39ca8665341bf05b2211ed8444fba4b106ddf3bf5931c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71735 Malicious code in yodelling-sapphire-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f4e1e23bed17ae8fde64589de97aece70615f7c890851e724f6bf5ff522af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68113 Malicious code in everyday-plum-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0592427a2f24c5dbc1b5da9eea18d530683677c3603140740a220a9540cecb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70630 Malicious code in similar-pink-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0247910e7de4ba623d867d1ffb121e5d129de62d2b3ff4412803a083e2a801bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68842 Malicious code in inclined-aqua-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cad7fa729c46e21373efb287989fae102c4a3ad497fc43802855e7ed4f3d8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67983 Malicious code in electric-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dce79f878b79da99d42959702b1a0bf499ed8f90f918bb6195d1557f3dac936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71742 Malicious code in youthful-black-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27fb39167332bdcc8edd883c1ad7902c38cf08fb61b6c6437f2e8488d935168c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68984 Malicious code in irrelevant-plum-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b46b6c9f07a915d1908cb0462ace9edcb6d55dec50eb1ec23e7affc2827a62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71012 Malicious code in sweet-azure-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f4b91e014f29bbcfae31e45806a7403db73ac7d4e93348f60ba5b171e328e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68991 Malicious code in itchy-coral-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3533158e6d165638d55d9ae8f050d7e5f8e9b86f62ee2ebf223c1dc2c089056b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68061 Malicious code in environmental-coffee-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53a8ac83760e669b8f548b06d3ed863f1fb78ee7ae70fa200ddb4a1cf87143d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67782 Malicious code in disastrous-rose-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b23b8dedb85f002c2bb2aec627314c41a8d7d6cdacf915aa6d60f94b13220adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70755 Malicious code in specific-fuchsia-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dbd57b96144014864808047e3c69cc4d0427ca3067c011dcd33e3045f52946b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69050 Malicious code in kind-orange-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dfa396aee0f96c408ef0b25d13b4931192bcaef8908d5c06c1b8954d8e66b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67793 Malicious code in distinct-purple-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5040f0633f5b60c6cddbdebf976bcc6c8ad99f12554b255398caf6625b5d0d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blushing-indigo-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b3781788eb341a852764472519b6822cf36f37e745c74fb4bf1124e87c0442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dying-green-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c908dc2e8c74a5abb2de9205fc910e1276ef474ba1bcd9f96291bc977342dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in active-jade-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599a58142aff6aef2b7503d2b238da2f3952f0c4019fb4eda35580b8d37d5891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...